Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/e8d7806d-c458-3253-b585-aab0952b090b.roa
File:                     e8d7806d-c458-3253-b585-aab0952b090b.roa (raw, json)
Hash identifier:          3+Hu1t/uqq6JhZAyek952w5u0EwdjASnbkuO6FvGdhE=
Subject key identifier:   90:C1:9B:B4:A6:EF:0F:FF:F3:B6:9B:D6:21:99:7C:F1:83:8F:A2:35
Certificate issuer:       /CN=171c42a2-3dc6-43af-b734-e91956bdfe19
Certificate serial:       010D0C9F4328584EA7887F3FFFBCE542192D7F80
Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/e8d7806d-c458-3253-b585-aab0952b090b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     202
IP address blocks:        135.84.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:7f:3f:ff:bc:e5:42:19:2d:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=762fed1b-9c06-4054-a65e-56e40fe202e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8d:74:5d:7a:67:e1:1d:be:7d:53:36:0f:13:
                    50:a7:96:44:a8:e4:06:dc:5d:9f:52:bf:c8:13:66:
                    3e:38:66:85:2a:c8:d5:d2:98:04:98:83:5f:94:58:
                    37:b9:90:06:1e:55:c5:f0:97:5a:fb:32:96:bb:26:
                    12:87:35:b7:41:53:50:b0:13:00:31:29:1e:4e:d7:
                    a1:ea:50:97:63:02:6d:49:5e:d9:a5:bb:97:25:ee:
                    97:40:33:14:74:b9:2d:58:60:62:75:9f:7d:2f:02:
                    f4:a5:fc:84:ca:e3:cd:2f:fb:5b:29:0d:c1:c9:45:
                    15:24:b5:4c:f1:03:21:12:1e:15:e2:ea:65:1b:16:
                    9f:67:c7:4d:d2:03:e4:79:7a:60:c5:3b:a8:7e:11:
                    2d:eb:cd:d0:06:8a:b4:57:07:a2:27:11:1c:52:42:
                    84:07:da:af:f6:72:fe:eb:a5:10:4b:01:7f:bf:f5:
                    92:2f:8b:72:d8:cb:62:c4:39:8f:5c:91:2f:17:bd:
                    e9:b1:c7:48:83:c9:e0:8f:33:d7:02:a2:54:8d:d8:
                    9e:71:00:1d:db:09:a9:f9:9a:24:6d:6e:b7:8a:45:
                    20:7a:77:3b:80:5b:b4:71:75:97:65:f8:5a:3e:d2:
                    67:ee:4b:bb:d8:45:20:d1:c1:cc:f9:f6:da:3d:9f:
                    03:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C1:9B:B4:A6:EF:0F:FF:F3:B6:9B:D6:21:99:7C:F1:83:8F:A2:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/e8d7806d-c458-3253-b585-aab0952b090b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl

            X509v3 Authority Key Identifier:
                keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:c7:fd:b4:12:8e:ae:38:ce:7e:53:9d:0d:b2:08:e9:74:64:
         94:ca:76:81:81:38:b3:af:4e:8c:89:29:26:82:31:b0:28:ea:
         0c:5e:16:52:eb:99:a0:53:2b:7b:c0:e8:ae:85:f7:8c:a8:f8:
         48:a0:8d:d4:e5:1d:05:eb:17:25:4f:82:62:fc:b4:53:7e:44:
         59:97:ce:73:f6:fc:4e:96:e9:d3:82:0d:3a:4a:58:75:da:49:
         10:63:b4:88:37:4a:2b:41:ff:57:0e:ff:96:34:68:23:7b:e1:
         b7:2d:19:4c:39:5d:dd:73:88:59:46:98:ba:ee:fb:03:73:7b:
         b4:c6:fd:b9:44:08:e9:68:05:28:a5:a2:13:a3:a2:70:c0:bb:
         9d:d3:6d:43:e5:5f:6a:84:b8:2a:36:6f:79:04:ec:c6:93:6c:
         ff:13:7e:e5:ea:12:09:ed:a6:17:64:25:66:0b:ee:ba:da:97:
         01:e8:ab:37:55:a0:5b:16:b0:b1:d2:fc:d9:d2:48:ec:46:4d:
         13:66:cb:91:57:84:1c:30:70:6f:be:4d:85:47:9b:e0:9a:3f:
         26:40:e5:0c:9c:25:30:37:ae:db:26:d0:78:d8:1b:c6:1f:ff:
         c7:37:16:e1:36:8b:0a:88:e0:d7:0d:76:b4:e5:55:f8:da:82:
         46:35:c7:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niH8//7zlQhktf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm
ZTE5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NzYyZmVkMWItOWMwNi00MDU0LWE2NWUtNTZlNDBmZTIwMmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4o10XXpn4R2+fVM2DxNQp5ZEqOQG3F2fUr/I
E2Y+OGaFKsjV0pgEmINflFg3uZAGHlXF8Jda+zKWuyYShzW3QVNQsBMAMSkeTteh
6lCXYwJtSV7ZpbuXJe6XQDMUdLktWGBidZ99LwL0pfyEyuPNL/tbKQ3ByUUVJLVM
8QMhEh4V4uplGxafZ8dN0gPkeXpgxTuofhEt683QBoq0VweiJxEcUkKEB9qv9nL+
66UQSwF/v/WSL4ty2MtixDmPXJEvF73pscdIg8ngjzPXAqJUjdiecQAd2wmp+Zok
bW63ikUgenc7gFu0cXWXZfhaPtJn7ku72EUg0cHM+fbaPZ8DBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJDBm7Sm7w//87ab1iGZfPGDj6I1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj
NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvZThkNzgwNmQtYzQ1OC0z
MjUzLWI1ODUtYWFiMDk1MmIwOTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3
MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk
ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5
NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBh1R4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAInH/bQSjq44zn5TnQ2yCOl0ZJTKdoGBOLOvToyJKSaCMbAo6gxeFlLr
maBTK3vA6K6F94yo+EigjdTlHQXrFyVPgmL8tFN+RFmXznP2/E6W6dOCDTpKWHXa
SRBjtIg3SitB/1cO/5Y0aCN74bctGUw5Xd1ziFlGmLru+wNze7TG/blECOloBSil
ohOjonDAu53TbUPlX2qEuCo2b3kE7MaTbP8TfuXqEgntphdkJWYL7rralwHoqzdV
oFsWsLHS/NnSSOxGTRNmy5FXhBwwcG++TYVHm+CaPyZA5QycJTA3rtsm0HjYG8Yf
/8c3FuE2iwqI4NcNdrTlVfjagkY1x0c=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:02:33 2026 by rpki-client